When I was first tasked with completing our initial SOC2 audit, I have to admit I was intimidated since I had never done anything of the sort. Thoropass assured me from the beginning they would be there every step of the way and THEY WERE! When the next year came around, we were assigned a new rep, Jade. From the jump she was extremely resourceful, friendly, professional and CONSTANT. Jade has assisted with training and compliance and has been a very import resource for our company. Our check-in meetings are educational and we always leave with either learning something new, or given a "heads up" on things we may have missed. I know if we have a question, it's one email and we will get a response. Thank you Jade for everything you have done and continue to do for us! We are alerted via email to login to complete upcoming tasks, which is at least monthly, which is helpful to have the extra reminders. The integration with our controls is resourceful and the entire implementation was doable. The first year was hard because we didn't know what to expect but we couldn't manage our SOC2 certification without Thoropass. Review collected by and hosted on G2.com.

I can't think of anything I dislike. The application is very well put together and the task tracking is great. Once you're trained, it's very easy to use. Review collected by and hosted on G2.com.

I really like that Thoropass centralizes all the tasks, policies, and procedures into one place and notifies us on time when we need to take action. It's helpful that the entire team has access to contribute to creating or updating policies and procedures, and it keeps us on track with security controls, which benefits our company's tech infrastructure. The initial setup was pretty straightforward, though it took some time to customize with our company's specifics. Review collected by and hosted on G2.com.

There were some glitches in the past related to menus overlapping information, but these were solved in a timely manner. One suggestion is related to the simplification (in terms of UX experience) of the tasks to be performed in one place, making it easier to take action. Review collected by and hosted on G2.com.

Thoropass made the SOC 2 process very smooth, straightforward, and accessible. What would have required significant effort and research on our part was made easy and clear on what we needed to do to attain our SOC 2 Type 2 compliance. Their customer support was excellent. They were responsive to every question, guided us through each step of the process with great communication and tracking, and had good educational resources for us to learn about the process. Between their customer support and online portal, our evidence collection process and engagement with our auditor was stress free. Their portal, integrations, and templates also significantly reduced the time investment needed for drafting our policies, collecting evidence, and tracking our security controls. Overall, we were very pleased with having chosen Thoropass as our compliance platform. Review collected by and hosted on G2.com.

I can't really think of much to dislike. Review collected by and hosted on G2.com.

Mostly the UI and Navigation modules. Ease of uploading documents and sharing comments with the CSM and auditors.During our compliance, we used to login frequently and we never faced any challenges. The customer support was Swift and our queries were clarified in no time. The integration module was so simple that any non technical person can also integrate different service provider with Thoropass without any support. the ease of implementation different compliance module and uploading supporting docs is super easy and convinient Review collected by and hosted on G2.com.

As of now, we have been using it for around 3 years, We never faced any issues so far. Review collected by and hosted on G2.com.

As of now, it has been an awesome tool to get track of every single requirement on our Compliance roadmap and to take ownership on these processes. Review collected by and hosted on G2.com.

Maybe not a dislike but a suggestion, that somehow it could be even more resourceful if the alerts can be connected to Slack-Asana natively. So we can have a more close follow-up on the notifications, not only by email-console. Review collected by and hosted on G2.com.

1. Comprehensive and TRUSTED by the business community one-stop solution that covers and provides: 1. comprehensive and detailed audit; 2. reports with certified badges, 3. an actual legally binding audit certification (no need to find another accounting audit firm to provide = HUGE BONUS!)l; and 4. ongoing support team (we use it).

2. Professional Account Managers stay on top of the process from the start to the finish, checking in along the way to keep all stakeholders on track and to meet deadlines.

3. A superior audit team that seems to be available almost 24/7 to answer questions in a very timely manner and is very smart. They all provided great tips and guidance when navigating the platform, the implementation process (straightforward), and a few integrations we had to accomplish very complicated tasks.

4. Great UI/UX design makes it intuitive and easy for senior managers like me to ensure all tasks are completed as they should be and on time by my team AND monitor the Thoropass audit & tech teams' support tickets.

5. Pricing is very fair given all you get (see #1 above). We negotiated a longer team deal covering more than 1 year and are very satisfied given what friends at other companies have paid. Review collected by and hosted on G2.com.

1. Not the most inexpensive solution in the marketplace.

2. The platform’s AI suggestions are sometimes "off", but welcome to the world of AI, and we always check anyway.

3. Duplicate document uploads during the audit process are frustrating, but they are foxing nd making better via AI tools we noticed at the end of process

4. Would be nice to simplify some navigation menus related to complex tasks, but too bad Review collected by and hosted on G2.com.

I liked Thoropass because while I was working towards my company's SOC 2 Type 1 certification, the project manager met with me on a biweekly basis. They gave me all the inputs I needed to consider, which kept me on track and made the process very efficient. This approach helped me speed up things as much as I could, and that's the best part of working with Thoropass. The setup of Thoropass was also very straightforward. Review collected by and hosted on G2.com.

Initially, the process to upload evidence requests were not straightforward. After a session or two with the project manager, it was better. Review collected by and hosted on G2.com.

I use Thoropass for their compliance platform to manage SOC 1, SOC 2, and GDPR internally and they perform our annual SOC 1 Type 2 and SOC 2 Type 2 audits. I appreciate how their tooling helps streamline our security and compliance efforts, with dramatically better reporting and some data collections being automated. The ability to assign and delegate tasks in one platform is very helpful. I find the usability to be excellent; it's very easy to navigate and use, and I was able to onboard as our compliance lead very quickly. Audit evidence requests were much easier with it. It also pulls data from our other tools for automated evidence collection. The initial setup was trivial, which made understanding the SOC requirements easier. Review collected by and hosted on G2.com.

I've hit some bumps with user access management and people management, and custom integrations would be awesome. Their questionnaire tooling is limited Review collected by and hosted on G2.com.

I’ve worked with Thoropass twice for SOC 2—once at a previous company and again at my current company—and both experiences were excellent.

The platform is easy to use, well-structured, and clearly shows what’s required, in progress, and audit-ready. Implementation is straightforward, even across organizations with different levels of security maturity.

Thoropass really stands out in customer support—their team is responsive, knowledgeable, and great at turning SOC 2 requirements into practical, actionable steps.

Feature-wise, Thoropass covers everything needed for SOC 2 in one place, including control management, evidence tracking, policies, vendor risk, and audit coordination.

Overall, Thoropass makes SOC 2 far more manageable and repeatable. I’d highly recommend it to any company pursuing or maintaining SOC 2 compliance. Review collected by and hosted on G2.com.

There’s very little to dislike overall. Some advanced features and reporting options may take a bit of time for first-time users to fully explore, but the learning curve is minor and well-supported by their customer success team. Review collected by and hosted on G2.com.

I appreciate the dedicated customer success manager who works with us during the process. Thoropass keeps us on track with reminders for recurring tasks and handles policy and security training tracking efficiently. I'm happy with the product and their addition of new features like the access review to enhance our experience. The setup was simple too. The platform let us get everything set up and validated for SOC 2 Type 1 and move right into the monitoring period for the Type 2 audit. Review collected by and hosted on G2.com.

There really weren't any pain points for us. Review collected by and hosted on G2.com.